Privacy Policy

Eatropolis is brought to you by Chow Luck Club Limited, a New Zealand company. We take your privacy seriously and handle personal information in accordance with the Privacy Act 2020 and the thirteen Information Privacy Principles. This notice explains what we collect, why, where it lives, and what choices you have.

Sections in this policy

• At a glance
• Information we collect
• How we use your information
• Where your information lives
• How long we keep it
• Sharing with third parties
• Cookies and analytics
• Your rights under the Privacy Act 2020
• How to contact us

At a glance

We collect the minimum information needed to send you event communications, process ticket sales, and answer your enquiries. We do not sell your personal information. You can ask to see or correct anything we hold about you at any time.

Information we collect

We collect the following when you interact with eatropolis.co.nz:

• Newsletter sign-ups — your email address, and your consent timestamp.
• Contact form — your name, email, and the message you choose to send us.
• Partnership applications — your name, organisation, email, phone (optional), and the details you provide about your business.
• Workshop RSVPs — your name, email, ticket holder reference (if applicable), and dietary or accessibility notes you choose to share.
• Ticket purchases — handled by our ticketing partner; we receive a confirmation that you hold a valid ticket, but credit card details go directly to the ticketing partner.
• Technical data — your IP address, browser type, and pages visited, used briefly for security (rate limiting, abuse prevention) and for aggregate analytics. Basic analytics is collected anonymously and without cookies; if you accept analytics cookies, we also measure your visit with a cookie for fuller insight.

How we use your information

We use what you give us only for the purpose you gave it for:

• To send you the newsletter you signed up for and event reminders directly tied to it.
• To respond to your enquiry, partnership pitch, or RSVP.
• To deliver the ticket experience you bought — entry confirmation, schedule updates, refund handling if the event changes.
• To keep the website running safely and to understand, in aggregate, how visitors use it.

We do not use your information to build a marketing profile of you, and we do not pass it to advertisers.

Where your information lives

Your information is stored in services we have carefully chosen:

• Email subscribers and form submissions live in a managed PostgreSQL database hosted in Sydney, Australia.
• Newsletter delivery is handled by a transactional email provider that processes only the data needed to deliver the message.
• Ticketing is operated by our ticketing partner under their own privacy terms — you'll be told who they are at the point of purchase.
• Analytics is processed by privacy-respecting providers (Google Analytics 4 and Cloudflare) that don't share data back to advertisers. By default it is anonymous and cookie-free; accepting analytics cookies enables fuller, cookie-based measurement.

All storage is encrypted in transit and at rest.

How long we keep it

• Newsletter subscriptions are kept while you remain subscribed, plus a short period after you unsubscribe so we can honour your choice.
• Contact and partnership messages are kept for up to twenty-four months after our last reply.
• Ticket-related records are kept for as long as our ticketing partner and tax law require, then deleted.
• Technical logs are kept for thirty days.

Sharing with third parties

We share personal information only when it's required to deliver the service you've asked for — for example, with our ticketing partner so you can collect your ticket, or with our email delivery provider so the newsletter reaches your inbox. We share with law enforcement only if we're legally required to.

Cookies and analytics

The site uses a small number of essential cookies to keep it running. We also run anonymous, cookie-free analytics by default — it doesn't store anything on your device or identify you. Analytics cookies (for fuller measurement) only switch on after you choose Accept on the cookie banner, and switch off if you Decline. For details about which cookies are used and how to change your mind, read the Cookie Notice.

Your rights under the Privacy Act 2020

You have the right to:

• ask us what information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information, except where we're legally required to keep it;
• withdraw your consent for the newsletter or analytics at any time;
• complain to the Office of the Privacy Commissioner if you think we've got something wrong.

To exercise any of these rights, email us at the address below.

How to contact us

For any privacy question — access requests, corrections, deletions, or complaints — write to info@eatropolis.co.nz. We aim to reply within two New Zealand business days.